Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: FUHqvuP6n4jAclxC00IqHSAyoxBVYlM5c7XZW6RXaZg=
Subject key identifier: 39:3F:64:2E:D2:34:B8:1C:95:11:58:8F:4D:21:FA:70:D5:9F:47:0C
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 019FA82B0DE589263AC1D27738BE3945BD6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 1714
Signing time: Tue 28 Jul 2026 10:00:21 +0000
Manifest this update: Tue 28 Jul 2026 10:00:21 +0000
Manifest next update: Wed 29 Jul 2026 10:00:21 +0000
Files and hashes: 1: hhOUjf_NNHVROjkzDtvuvC1VPOM.asa (hash: aaNYmLA4SwOuZSM4zGL+Zv09TvO6r7ywXgvya2WrJq4=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: WKeY02l1uJ20z6QJLR8yO9folWmNfPUr+nyl/1CN5Zo=)
3: xiXH-5SM76J3-yxlUQfLvem25-k.roa (hash: BDbe3QCIJuuE+sgkLyO0R164Cf4HsbhT+geqZAmQ7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:0d:e5:89:26:3a:c1:d2:77:38:be:39:45:bd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Jul 28 10:00:21 2026 GMT
Not After : Jul 29 10:00:21 2026 GMT
Subject: CN=393f642ed234b81c9511588f4d21fa70d59f470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:2b:dd:ce:23:53:47:2a:dd:92:42:6b:c0:
a1:9f:94:3d:0b:6e:33:76:8f:50:c1:d6:e0:25:0e:
c2:36:8f:55:c7:a0:fd:56:e1:1b:a2:bc:e1:71:b6:
e0:a8:de:5b:4f:14:80:c5:f5:a7:26:ac:48:86:37:
17:8b:a4:91:67:50:ef:1c:c1:6c:7c:11:ee:13:84:
af:0a:96:2c:de:49:f3:54:93:22:8a:0e:c1:f9:89:
cf:05:9f:7f:7a:dd:c7:ed:75:4c:3f:30:e1:a6:a6:
e6:1e:3e:fd:a5:df:4e:e8:ce:15:09:64:dd:c5:51:
c7:2f:65:45:f0:c3:b7:4f:ea:77:75:b0:93:c5:b8:
89:6a:76:fe:78:46:b0:b1:f1:7e:9f:55:ce:c6:ea:
0d:b2:f7:89:74:0c:5b:9b:1c:5a:ca:f3:fa:4b:69:
e9:85:81:fa:bc:3a:28:cd:24:db:1b:2d:28:29:9d:
5e:1b:90:af:de:81:f6:69:53:1f:2f:e5:c2:95:95:
87:62:39:4b:7e:55:20:db:ef:7a:03:4b:7b:e9:61:
ea:0a:72:25:ea:1c:41:38:de:97:2e:c4:cc:d2:f4:
43:d8:cb:12:72:97:d7:9b:56:84:e1:d3:69:65:62:
29:14:23:17:45:29:a0:8e:2c:64:71:8e:5d:da:45:
2d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3F:64:2E:D2:34:B8:1C:95:11:58:8F:4D:21:FA:70:D5:9F:47:0C
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:2a:c3:9c:71:83:43:e4:42:42:85:e5:11:44:f7:92:1e:
ce:68:6d:37:88:85:a2:a3:64:3d:6c:e0:98:be:0a:0d:cd:d0:
ac:99:61:a7:b8:d0:df:6c:57:de:6a:71:18:03:c6:0f:58:84:
13:e1:11:a4:78:c6:4d:ae:0c:70:58:77:e2:44:32:e0:8d:21:
09:0d:35:63:4d:bc:87:14:d5:f5:a4:c4:17:09:c1:0c:df:46:
00:66:2e:23:a1:10:c0:ae:67:6c:f8:03:77:72:a9:df:46:a4:
08:5b:58:40:b9:4d:de:67:fb:48:18:bb:9f:d8:89:75:b5:59:
aa:50:a0:b0:f8:08:30:ac:31:05:57:39:08:4a:af:a4:f1:34:
ea:20:1a:bc:ab:37:42:b2:4d:eb:35:5a:4e:72:d8:c9:dc:de:
40:db:aa:76:07:7c:6e:f3:db:fa:07:c1:dd:4d:f7:11:5c:ed:
a9:99:b6:03:bb:77:ea:51:a1:1e:41:b0:aa:56:da:65:95:b7:
7f:53:ac:bb:77:6d:34:fb:3f:6b:c0:9f:be:c9:51:bb:f0:c2:
8e:1d:74:19:f7:87:f2:26:71:af:ba:e0:a8:dc:42:7d:ca:ab:
2b:2b:87:6b:ea:31:23:b7:ef:19:db:49:1a:83:69:d0:fe:51:
2f:e7:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:52:46 2026 by rpki-client